Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
File: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft (raw, json)
Hash identifier: nQZP1YnobB1/k9CIdUcAQ0MI4Atqd5htvGIxe/Kvgr0=
Subject key identifier: 8B:9D:FA:7A:9D:B4:95:DD:19:F0:9A:95:D0:48:AA:C8:24:D7:B3:04
Authority key identifier: 19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
Certificate issuer: /CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Certificate serial: 01984A0A22AEBF5AE33DF1433620337AD261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 04:00:34 +0000
Manifest this update: Sun 27 Jul 2025 04:00:34 +0000
Manifest next update: Mon 28 Jul 2025 04:00:34 +0000
Files and hashes: 1: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl (hash: wFgATkjT2hF4vOECRvtRlhe6MKU98tRXnHPxOEiOrrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:22:ae:bf:5a:e3:3d:f1:43:36:20:33:7a:d2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Validity
Not Before: Jul 27 04:00:34 2025 GMT
Not After : Jul 28 04:00:34 2025 GMT
Subject: CN=8b9dfa7a9db495dd19f09a95d048aac824d7b304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:ce:1c:90:3a:02:3c:71:3c:11:f5:68:8c:
18:64:ff:71:76:35:c3:42:67:e2:17:9b:5b:75:9d:
5f:28:44:17:13:ca:f3:33:44:3b:a8:9c:cd:1d:04:
6d:95:8c:db:f4:98:c9:7a:55:d6:ef:8e:fc:07:3a:
c1:5d:8a:14:c6:2a:54:b2:6d:f5:77:03:c2:6d:7b:
aa:99:bf:e2:54:db:d9:52:b6:a4:04:ec:a1:21:25:
09:93:23:6c:47:fe:05:f5:ac:c0:3e:68:2b:64:f6:
ba:48:cc:20:73:d7:e8:d3:ca:b8:76:d8:7d:db:fe:
cd:74:da:d6:ce:18:a9:ee:08:01:a7:88:ed:d5:bc:
6e:07:82:60:16:39:81:d5:11:fd:c7:6e:f4:7f:bf:
f7:48:0d:b3:bd:6a:1e:75:09:83:58:90:29:34:7e:
5a:e8:93:66:fe:62:a3:c7:f0:fb:7b:64:2b:48:c1:
e0:0d:36:02:5b:1e:20:f9:d9:21:52:8f:d9:a0:7f:
dd:48:b0:94:77:7b:1d:7c:c9:5a:b0:95:fd:49:85:
6c:a9:6b:99:22:2f:fb:c0:86:71:73:d2:00:ad:4d:
d5:11:cf:5c:1a:43:6b:be:59:0e:92:c8:13:d2:66:
5f:df:96:55:93:15:ba:9b:40:8f:70:c6:1d:a7:9d:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9D:FA:7A:9D:B4:95:DD:19:F0:9A:95:D0:48:AA:C8:24:D7:B3:04
X509v3 Authority Key Identifier:
keyid:19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a6:a4:d2:64:83:dc:f6:b1:e2:ff:41:df:12:d0:94:3e:d9:
f1:2a:f9:af:ff:e3:94:d6:a9:01:30:d0:05:9b:b3:63:d0:df:
fd:e9:67:a7:44:e7:9c:8b:10:c6:74:61:d7:db:00:32:d9:0e:
ab:8f:94:30:ba:db:ff:99:bb:4b:05:fa:13:21:05:88:24:c1:
d9:88:19:70:22:ad:fb:6f:6a:28:c3:0b:1c:fc:50:b5:54:dd:
5c:2d:69:68:7d:cc:5d:1f:af:0c:6a:2d:4b:46:7e:a7:dd:7e:
bf:02:6e:e6:46:0e:48:d0:37:63:46:74:ea:4c:b1:5c:98:32:
31:00:70:52:0f:84:4d:da:d4:80:30:69:6f:a4:59:bd:12:89:
04:b1:89:33:47:1f:ad:8c:41:38:8c:e8:55:12:1a:82:b6:fd:
e1:47:5e:28:c8:a1:e0:3a:48:fd:b1:0d:f5:73:6e:d2:9c:9f:
44:07:72:fa:41:5f:3f:3f:26:df:30:f7:c6:ee:40:b7:19:bb:
1a:e9:20:09:43:31:8f:22:a6:d6:7e:6b:ec:52:24:5a:0f:23:
d1:7c:1a:7d:f3:1c:f3:62:67:ed:53:5c:37:08:30:cd:84:d3:
bb:dc:a6:92:a2:3c:a6:5e:f8:9e:74:df:be:5f:68:01:4b:c5:
fa:f4:86:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:09 2025 by rpki-client